CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42.

• CWE-306

• https://github.com/OneUptime/oneuptime/commit/9adbd04538714740506708d6fa610e433be4d2a4Patch
• https://github.com/OneUptime/oneuptime/releases/tag/10.0.42Release Notes
• https://github.com/OneUptime/oneuptime/security/advisories/GHSA-q253-6wcm-h8hpExploit, Mitigation, Vendor Advisory
• https://github.com/OneUptime/oneuptime/security/advisories/GHSA-q253-6wcm-h8hpExploit, Mitigation, Vendor Advisory

Published

Apr 2, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34752Haraka is a Node.js mail server. Prior to version 3.1.4, sen…7.5
• CVE-2026-34753vLLM is an inference and serving engine for large language m…5.4
• CVE-2026-34754Mantis Bug Tracker (MantisBT) is an open source issue tracke…4.3
• CVE-2026-34755vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-34756vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-34757LIBPNG is a reference library for use in applications that r…4.4
• CVE-2026-34759OneUptime is an open-source monitoring and observability pla…8.1
• CVE-2026-3476A Code Injection vulnerability affecting SOLIDWORKS Desktop …7.8
• CVE-2026-34760vLLM is an inference and serving engine for large language m…7.1
• CVE-2026-34761Ella Core is a 5G core designed for private networks. Prior …6.5
• CVE-2026-34762Ella Core is a 5G core designed for private networks. Prior …2.7
• CVE-2026-34763Rack is a modular Ruby web server interface. Prior to versio…5.3